CVE Catalog

CVE-2026-23420

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.09%

1th percentile - higher than 1% of all known CVEs

Summary

In the wlcore Wi-Fi driver in the Linux kernel, a locking bug was detected where wl->mutex is unlocked without being locked first.

Risk Assessment

The bug can cause synchronization issues, potentially leading to deadlocks or instability in the Wi-Fi driver.

Recommendation

Apply the Linux kernel patch that ensures the mutex is locked before unlocking.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: Fix a locking bug Make sure that wl->mutex is locked before it is unlocked. This has been detected by the Clang thread-safety analyzer.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS